webmail-ext.sagemcom.com

- Sagemcom Broadband SAS -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:5c:9e:00:70:35:67:e1:cc:2e:ff:58:a2:7d:c0:85 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sagemcom Broadband SAS

Organization: Sagemcom Broadband SAS
Locality: Rueil-Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:5c:9e:00:70:35:67:e1:cc:2e:ff:58:a2:7d:c0:85
Serial Number (int): 11114719932708792826390598800589570181
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:6c:0c:6a:fb:b7:e9:cb:88:d7:8b:08:f8:56:02:72:d8:b0:93:8b
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 8d:69:f6:05:82:e1:d8:5f:c0:f7:cd:73:df:11:52:b6:4d:40:b5:14
Fingerprint (sha256): a7:1b:b5:b7:ed:14:b1:82:a6:b9:5e:1e:e4:f4:3c:13:43:f9:55:e8:f8:e5:39:41:b7:1b:42:d9:63:ef:7e:22

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate webmail-ext.sagemcom.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail-ext.sagemcom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail-ext.sagemcom.com
webmail-int.sagemcom.com
autodiscover.sagemcom.com
smtp.sagemcom.com
chevilly.sagemcom.com
rueil.sagemcom.com
sip.sagemcom.com
uc.sagemcom.com
webconf.sagemcom.com
av.sagemcom.com
meet.sagemcom.com
dialin.sagemcom.com
lyncdiscover.sagemcom.com
ucdr.sagemcom.com
webconfdr.sagemcom.com
avdr.sagemcom.com
federation.sagemcom.com
mailphone.sagemcom.com

Other certificates including the domain name sagemcom.com

(limited to 100 certificates)
keys.sagemcom.com
snc.sagemcom.com
mdm.sagemcom.com
transfer.sagemcom.com
shiva.sagemcom.com
webmail-ext.sagemcom.com
webmail-ext.sagemcom.com
snc.sagemcom.com
incident.sagemcom.com
webmail-ext.sagemcom.com
incident.sagemcom.com
cms-demo.sagemcom.com
neoftp.sagemcom.com
www.sagemcom.com
neoftp.sagemcom.com
snc.sagemcom.com
support.sagemcom.com
orion.sagemcom.com
*.sagemcom.com
rdfe2.sagemcom.com
www.sagemcom.com
pegase.sagemcom.com
beam.sagemcom.com
limesurvey.sagemcom.com
reach.sagemcom.com
securemail.sagemcom.com
store.sagemcom.com
share.sagemcom.com
otrs.m2m.sagemcom.com
shiva.sagemcom.com
snc.sagemcom.com
sagemcom.com
gsmr-support.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
pegase.sagemcom.com
pegase-partenaire.sagemcom.com
sts.sagemcom.com
incident.sagemcom.com
cas.sagemcom.com
snc.sagemcom.com
sharesc.sagemcom.com
reach.sagemcom.com
documents-sav-b2b.sagemcom.com
mdm.sagemcom.com
esm-support.sagemcom.com
secure.sagemcom.com
shiva.sagemcom.com
cas.sagemcom.com
andromede.sagemcom.com
incident.sagemcom.com
pegase-psi.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
ctac.sagemcom.com
m2m.sagemcom.com
pegase.sagemcom.com
sharesc.sagemcom.com
shiva.sagemcom.com
transfer.sagemcom.com
snc.sagemcom.com
neoftp.sagemcom.com
neoftp.sagemcom.com
ctac.sagemcom.com
orion.sagemcom.com
old.sagemcom.com
rdfe2.sagemcom.com
share.sagemcom.com
mgp.sagemcom.com
ctac.sagemcom.com
pegase.sagemcom.com
shiva.sagemcom.com
sharesc.sagemcom.com
pa.sagemcom.com
pegase.sagemcom.com
webmail-ext.sagemcom.com
smartvillage1.sagemcom.com
sagemcom.com
sagemcom.com
limesurvey.sagemcom.com
rdfe2.sagemcom.com
support-femto.sagemcom.com
gsmr-support.sagemcom.com
transfer.sagemcom.com
pegase-psi.sagemcom.com
oldportal.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
share.sagemcom.com
pegase.sagemcom.com
pa.sagemcom.com
webmail-ext.sagemcom.com
keys.sagemcom.com
andromede.sagemcom.com

Certificate

The complete raw certificate details for webmail-ext.sagemcom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvtzo2e/hvccqH+EZRk+
bLzcs0R0oNAh6LZXXr0H0LgNrPWvTQxd/Rm7yxI91LurQjXNiq2eglS+S1gvh45t
4XC8Td3ebTSkxOHQfiWL23aBHfDj87sYYOVJ0REVClEXo3jagQYVUVGM0gI7ARxF
jGvQqD3z2MgcRZ1b+RFr9nCSkUBz171BNxmsoAbSCb+jdMJ93AXOb8d0yGJAPGCb
QE8FwbdHnGPdsqxF3KrM8c03iXnci1acfpQX0LuN/faR+34PfSVZWCqDRI84ICVZ
yhgQu0t/SfP1MPDNhymOq0DRzSA/m+Svsbww+e3cL6aIb2tgKYRR96rKzOzq0pCF
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11114719932708792826390598800589570181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil-Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sagemcom Broadband SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail-ext.sagemcom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21079554084984477064861793807183455931566369422277326700740901763380222148781184040694048437476104041543101143232722934767329562269738904975905960345681496969138581723750540334618911993135226872985626721490895110973456369345446263140320846198558891912021181705623069313331386365165676035144955996350685235052149345543613856044934631267265018651586900201379421743692209379741827197342033036557493950293557025415724606574269266219282661186305229874947621904572114826290559529722524573576121195253342723178586882590400114881719712845812686321480778554538863893094530603491592166263406641351135111592407146929362209637693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d6c0c6afbb7e9cb88d78b08f8560272d8b0938b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-ext.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-int.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevilly.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rueil.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconfdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federation.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailphone.sagemcom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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